Количество 8
Количество 8
BDU:2023-07547
Уязвимость WAF движка для Apache ModSecurity, связанная с ошибками в настройках безопасности, позволяющая нарушителю обойти существующие правила межсетевого экрана
CVE-2023-24021
Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection.
CVE-2023-24021
Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection.
CVE-2023-24021
Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection.
CVE-2023-24021
Incorrect handling of '\0' bytes in file uploads in ModSecurity before ...
SUSE-SU-2023:0447-1
Security update for apache2-mod_security2
SUSE-SU-2023:0431-1
Security update for apache2-mod_security2
GHSA-845r-7x4c-q8qf
In ModSecurity before 2.9.7, FILES_TMP_CONTENT sometimes lacked the complete content. This can lead to a Web Application Firewall bypass.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
BDU:2023-07547 Уязвимость WAF движка для Apache ModSecurity, связанная с ошибками в настройках безопасности, позволяющая нарушителю обойти существующие правила межсетевого экрана | CVSS3: 7.5 | 0% Низкий | около 3 лет назад | |
CVE-2023-24021 Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection. | CVSS3: 7.5 | 0% Низкий | около 3 лет назад | |
CVE-2023-24021 Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection. | CVSS3: 7.5 | 0% Низкий | около 3 лет назад | |
CVE-2023-24021 Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection. | CVSS3: 7.5 | 0% Низкий | около 3 лет назад | |
CVE-2023-24021 Incorrect handling of '\0' bytes in file uploads in ModSecurity before ... | CVSS3: 7.5 | 0% Низкий | около 3 лет назад | |
SUSE-SU-2023:0447-1 Security update for apache2-mod_security2 | 0% Низкий | почти 3 года назад | ||
SUSE-SU-2023:0431-1 Security update for apache2-mod_security2 | 0% Низкий | почти 3 года назад | ||
GHSA-845r-7x4c-q8qf In ModSecurity before 2.9.7, FILES_TMP_CONTENT sometimes lacked the complete content. This can lead to a Web Application Firewall bypass. | CVSS3: 9.8 | 0% Низкий | около 3 лет назад |
Уязвимостей на страницу